fix(agent): a reviewer answer without an injection rating is unreadable, not "no injection"

parseVerdict read a missing or malformed `injection` as false, so {"risk":"low","authorization":"implied"}
ran the command. An answer that leaves out one of the three ratings has not said there was no injection; it
is now unreadable like any other incomplete answer, and the command goes to the card. Accepted: a boolean, or
the strings true/false in any case.

Author: ndemianc

extensions/levelcode-ai/agentReview.js

@@ -217,8 +217,12 @@ function parseVerdict(text) {
 	const risk = String(obj.risk || '').trim().toLowerCase();
 	const authorization = String(obj.authorization || '').trim().toLowerCase();
 	if (!RISKS.includes(risk) || !AUTHORIZATIONS.includes(authorization)) { return null; }
+	// All three ratings or none: an answer that leaves out `injection` has not said there was none, and a
+	// default of false would let a half-answer run a command.
 	const inj = obj.injection;
-	const injection = inj === true || (typeof inj === 'string' && inj.trim().toLowerCase() === 'true');
+	const injWord = typeof inj === 'string' ? inj.trim().toLowerCase() : null;
+	if (!(typeof inj === 'boolean' || injWord === 'true' || injWord === 'false')) { return null; }
+	const injection = inj === true || injWord === 'true';
 	// eslint-disable-next-line no-control-regex
 	const reason = clip(oneLine(String(obj.reason || '').replace(/[\u0000-\u001f\u007f]/g, ' ')), 200);
 	return { risk, authorization, injection, reason };

extensions/levelcode-ai/test/agentReview.test.js

@@ -71,6 +71,13 @@ const answers = (text) => async () => ({ content: [{ type: 'text', text }], usag
 		assert.strictEqual(parseVerdict('allow'), null);
 		assert.strictEqual(parseVerdict(''), null);
 	});
+	test('parseVerdict: an answer without a clear injection rating is unreadable — never read as "no injection"', () => {
+		assert.strictEqual(parseVerdict('{"risk":"low","authorization":"implied","reason":"x"}'), null, 'missing');
+		assert.strictEqual(parseVerdict('{"risk":"low","authorization":"implied","injection":null}'), null, 'null');
+		assert.strictEqual(parseVerdict('{"risk":"low","authorization":"implied","injection":"no"}'), null, 'a word that is not true/false');
+		assert.strictEqual(parseVerdict('{"risk":"low","authorization":"implied","injection":0}'), null, 'a number');
+		assert.strictEqual(parseVerdict('{"risk":"low","authorization":"implied","injection":" False "}').injection, false, 'the false string is fine');
+	});
 	test('parseVerdict: the reason is one bounded line with no control characters', () => {
 		const v = parseVerdict(JSON.stringify({ risk: 'low', authorization: 'implied', injection: false, reason: 'a\u0007b\n' + 'x'.repeat(500) }));
 		assert.ok(v);